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SUPERCOMPUTING 


Scientists  Race  to  Simulate  Earthquakes 


The  rush  to  build  more-powerful 
supercomputere  is  part  of  a  larger 
race  to  solre  some  of  mankind’s 
biggest  problems.  One  person  on 
the  front  line  of  that  effort  is  Thomas  Iordan, 
director  of  the  Southern  California  Earth¬ 
quake  Center. 

“We  are  very  concerned  about  the  current 
state  of  the  faults  in  Southern  California," 
said  Jordan,  who  described  the  San  Andreas 
f^t  as  “locked  and  loaded  and  ready  to  toll" 
with  a  sizable  earthquake. 

Using  a  supercomputer  called  Jaguar  at 
Oak  Ridge  National  Laboratory,  Jordan’s 


an  earthquake  might  affect  Southern  Cali¬ 
fornia.  Running  at  1.75  petaflops.  Jaguar  is 
the  world’s  second-fostest  supercomputer. 
But  now  Jordan  is  preparing  his  applica- 


an  on  Blue  Waters,  a  lo-petaflop 
lat’s  being  built  by  IBM  for  use  late 
next  year  at  the  National  Center  for  Super- 
computing  Applications  at  the  University  of 
Illinois  at  Uihana-Champaign. 

An  application  with  a  runtime  of  4,000 
hours  pet  processor  on  Jaguar  could  be 
completed  in  just  770  hours  on  Blue  Waters, 
Jordan  said  at  the  SCio  supercomputing 
conference  in  New  Orleans  last  month. 

There  is  utgetX7  to  Jordan’s  need 
for  more  computing  power;  Experts 
estimate  that  there’s  a  99%  chance 
of  a  magnitude  6.7  or  greater  earth¬ 
quake  during  the  next  30  years  in  California. 

It  could  be  years  before  that  happens,  said 
Jordan,  but  “I  can  tell  you,  all  the  seismolo- 


than  two-tniros  or  current  mal¬ 
ware."  said  Avast  virus  anaiyst  Jan 
Sirmer.  Cybercriminals  are  taking 
advantage  of  people  who  use  USB 
flash  drives  to  share  large  files  with 
friends  or  transfer  files  at  their 
workplaces,  Sirmer  said. 

Infected  USB  devices  -  which  can 
include  portable  gaming  units,  digital 
cameras,  mobile  phones  or  MP3  play¬ 
ers  -  start  executable  files  that  invite 
a  wide  array  of  malware  Into  host 
computers.  The  Incoming  malware 
copies  itself  Into  Windows  and  can 
replicate  itself  each  time  the  com¬ 


ers  not  to  boot  up 
PCs  that  already 
have  USB  devices  anached,  because 
the  malware  will  load  before  some 
antivirus  programs  do. 

COMPUTERWORLD  U.K. 


Rely  on  one  network  right 
where  your  team  needs  it 

Sprint  Global  MPLS  gives  you  the  upper  hand  by  converging  voice, 
video  and  data  on  a  single  IP-based  network.  Sprint  Global  MPLS  also 
gives  you  best-in-class  network  performance,  with  industry-leading 
SLAs  and  Class  of  Service  at  no  additional  charge  to  get  you  started. 
1-866-653-1056  sprintcom/convergence 


Sprint 

The  Now  Network 


Winner  of  the  Frost  &  Sullivan  North  American  Product  Leadership  Award 

for  MPLS  Service  Level  Agreements  tor  Business  Customers-ZOlO 
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WE  WORK  FOR  YOU.  NOT  THE  OTHER  WAY  AROUND, 

It  may  not  seem  like  a  revolutionary  idea,  but  in  the  security  industry  it  is.  It  has  somehow  become  the  norm  to  pass  the  burden  of 
security  from  company  to  customer.  Installing,  maintaining,  downloading,  and  updating  is  somehow  your  job,  while  finger  pointing, 
blaming,  and  looking  the  other  way  is  theirs.  Well,  at  Webroot  we  think  it's  time  for  a  change.  It's  time  for  security  to  be  the  service 
it  is  sold  as,  instead  of  the  burden  it  becomes.  It's  time  to  prevent  problems  instead  of  scrambling  to  fix  them.  It's  time  for  Webroot. 


For  more  information  about  Webroot  busines 
call  866.915.3208  or  visit  webroot.com/4u 


Webroot' 

Information  Security  Soived 


Users  Seek  Clues 
On  Novell  Deal 

Customers  are  mostly  in  the  dark  about  the 
future  of  Novell’s  products  following  the 
company’ssaletoAttachmateandaMicrosoft- 
led  consortium.  By  Patrick  Thibodeau 


The  COMMEX  $2.2  billion  sale  of  Novell  Inc.  and  its 

copyrights  to  Attachmate  Coq>.  and  a  consortium  led 
by  Microsoft  Corp.  has  left  users  wondering  about  the 
future  of  the  condiined  company’s  product  lines,  and 
about  Microsoft's  still-unclear  role  in  the  transaction. 
Bob  Schaber,  network  operations  manager  for  the  Dublin, 

focusonwhichNovellpitxluctsAttachinatewillcontitiuedevel- 
opii^  and  what  its  longterm  plans  for  those  products  will  be. 

The  city  government  tuns  Novell’s  Open  Enterprise  Server  and 
its  Teaming  and  Conferencing  applications. 


is  to  ‘do  no  harm’  to  the  successful  stand-alone  operations  of  all 
companies  as  we  integrate.” 

Attachmate  is  owned  by  an  investment  group  led  by  Fran¬ 
cisco  Partners.  Golden  Gate  Capital  and  Thoma  Bravo.  It  sells 
terminal  emulation  tools,  application  integration  tools,  legacy 
migration  products,  and  systems  and  security  management 
software  from  NetIQ. 

Novell,  founded  in  1979  as  a  PC  maker  before  shooting  to  prom¬ 
inence  about  four  years  later  with  the  unveiling  of  its  NetWare 
LAN  technology,  currently  sells  collaboration  tools,  identity 
management  software,  directory  services,  virtualization  products 
and  the  SUSE  iteration  of  Linux. 

Perkins  said  that  he  doesn’t  expect  any  changes  to  the  Novell 
and  Attachmate  product  lines  in  the  immediate  aftermath  of 
the  deal,  which  is  expected  to  close  in  the  first  quarter  of  2011. 
“This  technology  has  been  around  a  long  time;  they  have  a  big 
customer  base.  It’s  not  likely  at  this  particular  phase,  and  pro^ 
ably  not  for  more  than  a  year,  that  you  ate  going  to  see  any  major 
shifts  in  what  Attachmate  is  going  to  do  with  Novell,"  he  said. 

He  did  ofer  this  advice  to  Novell  users:  “Make  your  feelings 
known  to  Attachmate  on  a  variety  of  topes,  not  the  least  of 
which  is  ongoing  maintenance  and  support  contracts  for  existing 
Novell  deidoyments.”  Perkins  noted  that  maintenance  issues 
typically  arise  following  acquisitions  —  as  they  did  most  recently 
after  Oracle  Corp.  acquired  Sun  Microsystems  Inc.  ♦ 

Chris  Kaiaracus  and  Joab  iackson  0/  the  IDG  News  Service 
contributed  to  this  story. 


Deploy  in  days, 
not  months. 


No  kidding  around.  Installing  a  Dell  KACE  appliance  gives  you  comprehensive  systems  management 
in  days,  not  months.  We  also  do  it  for  a  low  total  cost  of  ownership.  Give  us  a  call,  let  us  prove  it. 
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the  products  to  work  together  so  that 
IT  departments  can  “develop  solutions 
quieter,  mote  robustly  and  with  infinite 


in  Irvine,  Calif.,  speculated  that  the 
excessive  damages  award  could  blunt 
the  willingness  of  third-party  support 
providers  to  ofier  the  pricing  and  other 
advantages  they  extend  today. 

“Some  of  us  have  been  advocating  for 


Verdict  in  Oracle-SAP 
Suit  Poses  Threat  to  IT 

Customers  fear  that  acrimony  could  hurt  sites  using  both 
vendors’  software;  analysts  predict  negative  repercussions 
for  the  third-party  support  industry.  By  JaikumarVijayan 


support  services  to  “ensure  that  those 
third  parties  engage  fairly  with  Oracle." 

The  11-day  trial  in  an  Oakland, 

Calif.,  federal  courthouse  captivated 


Last  month’s  federal  jury  verdict  awarding  Oracle  Corp. 
St.j  billion  in  its  corporate  theft  lawsuit  against  SAP  AG 

could  prove  harmful  to  both  enterprise  users  and  thitd- 

Otade  filed  the  lawsuit  against  SAP  in  2007,  charging 
the  German  vendors  now-shuttered  TomorrowNow  subsidiary 
with  the  electronic  theft  of  “thousands  of  proprietary,  copyright¬ 
ed  software  products  and  other  confidential  materials"  used  by 
Oracle’s  support  organization. 

SAP  indicated  that  it  will  appeal  the  awaril,  which  several 
analysts  called  excessive  in  of  the  small  size  of  the 

“The  business  that  they  were  in  was  to  fix 
glitches  in  [Oracle]  softw^  and  mate  some 
compliance  updates,"  said  Paul  Hamerman, 
an  analyst  at  Forrester  Research  Inc.  “They 
weren’t  trying  to  resell  any  of  the  software 
that  they  were  downloading." 

and  SAP  could  cause  significant  problenis 


.  Silicon  Valley  with  the  drama  of  a  battle 

between  the  world’s  two  biggest  busi¬ 
ness  applications  software  vendors. 

WelHcnown  executives  like  Oracle  CEO  Larry  Ellison,  Oracle 
co-President  Safra  CaU  and  SAP  co-CEO  Bill  McDermott  ap¬ 
peared  in  the  witness  box.  Spectators  included  an  FBI  agent  who 
said  the  agency  has  “an  interest  in  the  case,"  and  Kyle  Waldinger, 
an  assistant  U.S.  attorney  based  in  San  Francisco. 

SAP  in  August  had  already  agreed  to  assume  Uability  tor  Ora¬ 
cle’s  copyri^  theft  claims,  and  in  court  the  company  estimated 
that  it  owed  Oracle  $40  million.  Ellison  testified  that  SAP  should 
pay  up  to  $4  billion  to  cover  the  cost  of  the  stolen  software. 

The  jury  was  given  wide  latitude  in  deciding  on  the  amount  of 
damages  to  award  and  apparently  bought 
Oracle’s  argiunent  that  SAP  should  have  to 
cover  the  cost  of  a  “hypothetical  license” 

—  or  whatever  it  would  have  had  to  pay 
Oracle  to  license  the  stolen  strftware  at  fair 


'  yes,  this 

has  to  be  a  concern. 


NOD32 
Antivirus  4  i 
for  Mac 

Cross-platform  protertion 
—  one  console 


Our  award-winning  ESET  NOD32®  Antivirus  is  the  faster,  smarter,  easier-to-manage 
defense  against  Internet  threats.  With  a  unified  management  console  that  scales  to 
support  small  and  large  business  networks,  ESET  NOD32  delivers  advanced  proactive 
protection  for  all  your  endpoints,  whether  they  are  running  Windows,  Mac  or  Linux. 
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Hurry  -  offer  ends  12/31/2010! 
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Whether  you're  a  beginner  or  a 
professional,  1&1  offers  a  full  range 
of  website  solutions  to  suit  your 
needs.  For  a  limited  time,  we're 
offering  all  web  hosting  packages 
at  one  incredible  low  price.  Website 
building  tools,  unlimited  traffic,  and 
search  engine  marketing  dollars  are 
included  with  all  packages. 


Go  to  www.1and1.com  to  choose 
your  package! 


DOMAIN  OFFERS: 

.info  only  S0.99  first  year  .com  only  $4.99  first  year 

'  Free  Web  ,  90-Day  Money  24/7  Toll-Free 

'  .-  Marketing  Tools  Back  Guarantee  .  Support 


1&1 


Call  1-877-GO-1AND1  or  visit  us  now 


www.1and1.com 


THE  GRILL  I  DIETERICH  LAWSON 


Ui*m  learning, 
but  every  day 

I  wake  up  kind 
of  surprised 

that  1  haven’t  stepped  on  a 
proverbial  land  mine. 


Continued /rom  pi^  10 
sick,  it  can  be  brutal, 
potentially  deadly.  To 
combat  this  problem, 
many  dinks  have 
begun  training  com¬ 
munity  health  workers, 
orCHWs,wholivein 
these  rural  communi¬ 
ties  and  provide  basic 
medical  cate  as  a  proxy 
for  the  dink.  Unhn- 
tunately.theCHWs 
have  limited  supplies 
and  only  a  few  weeks 
of  training  and  are 
often  as  discmuiected 
from  the  clinics  as  the 
patients  themselves. 

]osh  had  the  idea 
to  give  each  CHW  a 
cell  phone  and  equip 
St.Gabrid'swith 

FronUineSMStMedk, 
a  feee  and  open-source 
software  padtage  that 
allows  users  to  send  and 
receive  text  messages 
from  their  computers 
viaaUSB-connected 
mobile  phone.  This 
simple  improvement  in 
comtrmnkatioo  saved 


the  dink  2,048  hours 
of  worker  time,  reduced 

motorbike  fuel  costs  by  $3,000  and  doubled  enroll¬ 
ment  to  their  tuberculosis  treatmem  program. 

TWo  years  later,  we've  created  a  collection  of  soft¬ 
ware  tools  that  have  been  deployed  in  10  countries 
and  ate  being  used  by  1,500  CHWs  who  serve  over 

3.5  million  patients. 


WMtpwjnctililNdhMrltlt— TOiieofour6rst 
projects,  PatientView,  is  a  simple  and  easy-to-use 

dectronk  medical  record  targeting  small  clinks  or 

single  departments  that  have  little  support  from  pro¬ 
fessional  IT  staff.  Many  of  these  clinics  are  curroitly 
using  paper  medical  records  and  would  benefit  from 

the  improved  efficiency  and  reliability  of  an  EMR 

but  do  not  have  the  technical  staff  to  maintain  one, 

as  they  are  typically  large  and  complex.  To  address 
this  problem,  PatientView  was  designed  to  be  easy  to 

set  up,  easy  to  maintain  and  easy  to  use.  Beyrmd  sim¬ 
plicity  and  usability,  PatientView  has  many  mobile 
features  that  are  useful  when  working  with  health 
workers  in  the  field,  like  the  ability  to  coordinate 
SMS  to  and  from  the  workers,  accept  forms  submit¬ 
ted  on  mobile  phones,  and  more. 


PatientView  is  a  desktop  application,  and  at  times 
we’ve  been  criticized  for  limiting  it  to  offline  use 
only.  However,  we  have  found  consistently  that  our 
partners  do  not  have  a  reliable  enough  connection 
to  access  a  Web  appikation  that  is  hosted  remotely 
and  do  not  have  the  expertise  to  maintain  network 
infrastructure  and  a  full  Web  stack  locally. 


HOW  will  the  needs  Of  IHdic^  Man  diaate  as  this 

tedmology  develops?  One  such  need  involves  Inter¬ 

net  cormectivity  in  many  resource-constrained  areas. 
Currently,  we  ate  very  focused  on  SMS  technology 
because  it  is  reliable  and  available  nearly  everywhere. 
But  as  Internet  tech  like  GPRS  becomes  more  wide¬ 
spread  and  reliable,  our  users  will  want  technology 
that  takes  advantage  of  this  faster,  cheaper  connec¬ 
tion  method.  In  a  similar  vein,  many  of  our  deploy¬ 
ment  areas  will  eventually  have  stable  access  to  wired 
Internet  and  will  want  to  leverage  all  of  the  advan¬ 
tages  that  it  can  provide. 

What  is  yoor  role  at  Hodic?  TCdmolocy  vMonary? 
Operatioos  manafcr?  My  job  revolves  around  defin¬ 
ing  our  software  direction  and  goals,  and  coordinat¬ 
ing  the  achievement  of  those  goals. 

Defining  our  software  goals  begins  with  gathering 
dau  and  input  from  marry  groups  of  people,  including 
our  staff  and  end  users.  From  these  conversations,  we 
work  to  home  in  on  a  set  of  realistic  and  attainable 
features.  It's  my  job  to  ensure  that  the  goals  created 
represent  the  interests  of  Medk,  and  that  the 
goals  are  communicated  to  our  development  team. 

The  second  part  revolves  around  ensuring  that  our 
development  team  is  operating  at  peak  efficiency  and 
accomplishing  the  goals  that  we've  esublished. 


arm,  headed  by  Nadim  Mahmud.  The  job  of  Medic 

Research  is  to  oversee  studies  at  our  implementation 
sites,  determine  our  impact  and  publish  the  results  in 
peer-reviewed  journals. 


What  art  MM  ar  Hm  advanUfM  pf  bpipc  a  vmmg 
CTO  at  a  fakfetarfe-ttage  growth  tech  company? 

The  main  advantage  to  being  younger  is  having  fewer 

assumptions  about  what  can  done  and  how  to  do 
it.  Other  than  that.  I’ve  found  that  it's  mostly  a  chal¬ 
lenge  —  I’m  inexperienced  at  public  speaking  and 
still  get  stage  fr^t  I  don’t  have  shared  experiences 
with  many  of  the  people  I  meet. 

I’m  learning,  but  every  day  I  wake  up  kind  of 
surprised  that  I  haven’t  step^  on  a  proverbial  land 
mine.  All  that  being  said,  though,  I  also  wake  up 
feeling  incredibly  lucky  to  have  found  such  a  fulfill¬ 
ing  and  challenging  job  while  I’m  still  young.  I  have 
the  rest  of  my  life  to  be  timid. 

-  Interview  by  Sara  Farrttt  0  freelance  photegrapber 
and  writer  in  New  York  (studio@son^brrestplioto.com) 
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For  IT,  It’s  All  Going 
To  Be  About  Processes 


IT  leaders  are 
expected  to 
anticipate  the 
business’s 
needs,  but 
recent  events 
suggest  we 
often  don’t 
know  what 
is  actually 
going  on. 


TlianrtoiiA.llay 

is  the  author  of 
The  New  Know:  Innovation 
Powered  bv  Analytics 
and  executive  director 
of  the  IT  Leadership 
Academy  at  Florida  State 
College  at  lacksonville. 
You  can  contact  him  at 
thomtonamavS 


Anticipation  and  foresight  are  critical  to  it  leadership  success. 
But  don’t  just  take  my  word  for  it. 

When  studio  Dreamworks  SKG  was  starting  up,  the  CIO  told  me 
that  the  No.  i  responsibility  of  CIOs  in  his  industry  was  to  “antici¬ 
pate  problems  before  the  business  encountered  them  —  to  see  the  wall  be¬ 
fore  the  business  slammed  into  it.” 


it,  and  have  it  ready  to  go  when  I  think  of  it." 

But  if  IT  leaders  are  going  to  anticipate  the  way 
they’re  expected  to,  they  ate  going  to  need  a  better 

handle  on  processes. 

At  the  IT  Leadership  Academy,  we  ate  about 
a  third  of  the  way  into  a  yearlong  examination 

of  what  is  known,  vvhat  con  be  known  and  what 
must  be  known  about  critical  business  processes  in 
the  enterprise.  Much  of  the  attention  in  IT  these 
days  seems  to  be  directed  at  four  change  vectors: 
the  cloud,  mobility,  business  analytics  and  social 
media.  But  all  that  good  work  could  be  nullified 

by  underperfbrmance  in  the  unsexy  hut  critically 
important  area  of  process  knowledge. 

We  live  in  a  complex  world.  Regulators,  inves- 

tearns  operate  vvith  full  knowledge  of  key  proc¬ 
esses  in  the  enterprise.  But  several  recent  events 

—  the  BP  Deepwater  Horizon  btowout  and  the 
recall  of  eggs  in  the  wake  of  the  salttjonella  scare, 
plus  numerous  other  recalls  —  suggest  that  we 
often  don’t  know  what  is  actually  going  on. 

Our  early  research  dau  suggests  that  the  full 

capture  and  analysis  of  process  knowledge  is  more 

the  exception  than  the  rule.  How  can  this  be? 

processes.  Then,  in  the  ’90s,  we  re-engineered 

the  processes  we  had  automated.  During  the  first 
•  ■"  ve  spent  trillions  of 


dollars  on  ERP,cus 
supply  chain  and  knowledge  management  systems. 
And  yet,  when  asked  to  identify  their  enterprises’ 
cntk^  processes  and  evaluate  how  they’re  perftjrm- 
ing,  the  vast  majority  of  executives  couldn’t  say. 

The  age  of  process  re-;ngineering  was  launched 
when  MIT  computer  science  professor  Michael 

Hammer  lobbed  a  shot  across  the  bow  of  out 

industry  in  his  Harvard  Business  Review  article 
“Don’t  Automate.  Obliterate”  (July-August  1990). 
Every  consulting  firm  created  a  practice  around 


:te  the  hi^  ground  of  IT.  ’Then,  somehow,  they 
quietly  faded  from  IT  consciousness. 

’The  preliminary  interviews  1  have  conducted 
indicate  that  those  of  us  in  IT  know  that  we’re  not 

as  aware  of  what’s  actually  happening  in  key  proc¬ 
esses  as  we  should  be.  aOs  r^tly  perceive  that 
they  would  put  their  careers  at  risk  if  they  shed 
light  on  the  fact  that  their  IT  shops  ate  ignorant  of 

their  enterprises’  processes.  Meanwhile,  the  busi¬ 
ness  executives  who  oversee  key  processes  believe 

that  they  understand  how  things  work,  but  often 
their  understanding  is  far  removed  from  how 
things  actually  work.  ’That  gap  is  fueling  a  process 
bomb  that  is  dangerously  close  to  exploding. 

So  in  addhion  to  all  our  other  responsibilities, 
IT  will  have  to  defuse  that  process  knowledge 

ignorance  bomb.  Be  careful,  and  move  cautiously. 
1  welcome  readers’  thoughts  on  the  state  of 

process  knowledge  capture,  analysis  and  action  in 
their  enterprises  and  industries.  • 


14 


Scale  up,  scale  down — no  biggie. 


Cloud  management  should  be  quick  and  easy.  With  Computing  as  a  Service  (CaaS)  SMB,  it  is.  Our 
intuitive  dashboard  enables  you. to  provision  servers  and  scale  computing  up  or  down  in  minutes. 
CaaS  SMB  lets  you  pay  only  for  the  capacity  your  business  needs,  when  it  needs  it,  so  you  can  avoid 
the  expense  of  expanding  and  maintaining  on-site  senrers.  Only  Verizon's  service  features  physically 
redundant  architecture  for  up  to  1 00  percent  availability,  fully  integrated  firewalls,  and  enterprise- 
grade  virtualization,  so  your  data  and  applications  stay  secure.  And  unlike  other  cloud  solutions, 
there's  no  minimum  commitment  to  use  it. 

To  get  started  with  CaaS  SMB,  visit  verizonbusiness.com/caassmb  today. 
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liceiue  model  and  vendois'  pricing  terms, 
customers  are  haggling  for  better  deals, 
says  IDC  analyst  Amy  Konary.  Some 
customers  are  threatening  to  choose  other 
options  —  including  virtualization,  soft¬ 
ware  as  a  service  (SaaS)  and  open  source 
—  if  a  traditional  vendor  doesn't  meet 

their  demands,  she  explains. 

The  economic  downturn  has  also  given 
customers  mote  leverage,  says  Ray  Wang, 

an  analyst  at  Al 


up  to  60%,  he  says,  adding,  “This  is  a  great 

time  to  buy  enterprise  software." 

Baker  Hughes  Inc.  recently  got  better 
ns  from  several  vendors  by  agreeing  to 


Wb  have  much  more 
leveraceandcanget 
volume  discounts  by 
bargaining  as  a  single 
company  instead  of 
eight  divisions. 


Maintenance  is  another  area  where  cus¬ 
tomers  are  starting  to  push  for  fairer  deals. 

For  example,  Gartner  Inc.  recently 
formed  a  user  group,  called  the  Global  IT 
Council  for  IT  Maintenartce,  that  has  issued 
a  “code  of  OMiduct"  for  the  way  vendors 
approach  maintenance  deals.  It  calls  for 
“reasonable,  predictable"  percentage  ranges 
for  annual  maintenance  fee  increases  or 
reductions,  loi^term  caps  on  increases, 
and  the  ability  for  customers  to  stop  or  alter 
suppmt  at  any  time  for  unused  products. 


play  hardball  at  the  negotiating  table,  of 
course.  They  mi^  cut  you  a  deal  upfront 
but  also  include  clauses  that  hamstring  your 
—  such  as  elimi¬ 


an  enterprise  rather  than  having  each  of  its  divisions  negotiate  on 
its  own,  says  Graham  Cri^  IT  assets  manager  at  the  Houston- 
based  global  oil-services  firm.  “We  have  much  more  leverage  and 

can  get  volume  discounts  by  bargaining  as  a  single  company  with 

36,ooot>Ius  users  instead  of  eight  divisions,"  says  Crisp. 

Enterprises  have  always  been  able  to  cut  deals  in  exchange 
for  larger  and  longer-term  commitments.  The  big  change  now  is 
that  the  customer  “has  more  transparency,  flexibility  and  choice" 
during  negotiations,  Konary  says. 

In  addition  to  providing  more  pricing  options,  vendors  are 
becoming  more  open  about  what  choices  they  offer,  Konary  says. 
Indeed,  some  are  actually  using  them  as  marketing  tools. 

Cloud  vendor  RightNow  Technologies  Inc.,  for  example,  has 

been  trumpeting  a  provision  in  its  new  doud  services  agreement 

that  allows  users  wi»  sign  multiyear  deals  to  cancel  at  the  end 

of  a  year  for  any  reason.  In  addttion,  customers  can  buy  a  pool  of 

“seat  months”  that  they  can  use  on  an  as-needed  basis. 


nating  volume  discounts  when  you  give  back  licenses,  says  Wang 

First  Steps:  Analyze,  Streamline 

Assessing  your  software  assets  and  monitoring  utilization  are  crucial 
first  steps  for  negotiations  (and,  later,  contract  compliance  audits). 

Before  sending  out  requests  for  proposals,  businesses  need 
to  analyze  their  software  needs  and  streamline  those  needs  as 
much  as  possible,  says  Gartner  analyst  Bill  Snyder.  He  recom¬ 
mends  that  users  answer  these  two  questions:  “Is  there  a  cheaper 
alternative?  And  do  we  need  all  of  these  features  and  functions?” 

The  ability  to  predict  software  needs  is  critical  when  it 
comes  to  long-term  negotiations,  Snyder  says,  because  once  you 
deploy  a  vendor's  ERP  or  database  system  companywide,  you're 
effectively  in  a  monopoly  relationship.  If  you  purchase  too  few 
licenses,  you'll  have  to  buy  more  later,  losing  out  on  volume 
discounts.  If  you  buy  too  many,  you're  paying  maintenance  and 
Continued  on  page  20 
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We  believe  there  is  no  substitute 
for  REAL  SaaS. 


Private  cloud,  hosted  client-server,  your  mother-in-law-as-a-service. 

Words  matter-don't  let  the  legacy  software  giants  confuse  the  conversation.  All  Workday  customers  share  one 
application  and  are  on  the  same  version.  Why  does  this  make  a  difference?  When  everyone  is  using  the  same 
version,  the  focus  is  on  innovation  in  the  next  release,  not  on  the  support  of  previous  versions. 
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license  model  jnd  vendors' pricing  terms, 

customers  ate  haggling  for  belter  deals, 
says  IDC  analyst  .Amy  Konary.  Some 
customers  are  threatening  to  choose  other 
options  —  including  viriualizatiop.  soft¬ 
ware  as  a  service  (SaaS)  and  open  source 
—  if  a  traditional  vendor  doesn't  meet 
their  demands,  she  explains. 

The  economic  downturn  has  also  given 
customers  mote  leverage,  say  s  Ray  Wang, 
an  analyst  at  Altimeter  Group.  Some  have 
gotten  maintenance  and  support  fees  cut  by 
up  to  6o%.  he  says,  adding.  "This  is  a  great 

time  to  buy  enterprise  software.”  GRAHAM  CRISP 

Baker  Hughes  Inc.  recently  got  better 

terms  from  several  vendors  by  agreeing  to 

longer-term  contracts  and  by  bargaining  as 

an  enterprise  rather  than  havii^  each  of  its  divisions  negotiate  on 
its  own,  says  Graham  Crisp,  IT  assets  manager  at  the  Houston- 
based  global  oil-services  firm.  “We  have  much  more  leverage  and 
can  get  volume  discounts  by  bargaining  as  a  single  company  with 
36.000-plus  users  instead  of  eight  divisions,"  says  Crisp. 

Enterprises  have  always  been  able  to  cut  deals  in  exchange 
for  larger  and  longer-term  commitments.  The  big  change  now  is 
that  the  customer  “has  more  transparency,  flexibility  and  choice" 
during  negotiations,  Konary  says. 

In  addition  to  providing  more  pricing  options^vei^ts  are 

Indeed.  »me  are  dually  using  them  as  marketing  tools. 

Cloud  vendor  RightNow  Technologies  Inc.,  for  example,  has 
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tomers  are  starting  to  push  for  fairer  deals. 

For  example,  Gartner  Inc.  recently 
formed  a  user  group,  called  the  Global  IT 
Council  for  IT  Maintenance,  that  has  issued 
a  “code  of  conduct"  for  the  way  vendors 
approach  maintcnarKe  deals.  It  calls  for 
"reasonable,  predictable"  percentage  ranges 
for  annual  maintenance  fee  increases  or 
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_ TS  who  sign  multiyear  deak  to  cancel  at  the  end 

a  year  for  any  reason.  In  addition,  customers  can  huy  a  pool  of 
at  months"  that  they  can  use  on  an  as-needed  basis. 


OPTIONS 


Then,  if  the  vendor  rep  says.  “We 
don't  offer  that."  you  can  threaten 
to  go  to  someone  who  does. 

“Pay  per  smT  k  the  tradKhw- 


agreed-iipon  renewal  time.  At  the  very  least,  customers  lose  their  volume 

discounts  it  they  give  back  a  stgnHtcant  number  of  seats,  and  they  have 
to  oav  list  urice  for  additiooal  seats  if  they  underesttmated  user  demand. 


lating  volume  disr 


and  the  ability  for  customers  to  stop  or  alter 
support  at  any  time  for  unused  products. 

Recession  or  no  recession,  vendors  still 
play  hardball  at  the  negotiating  table,  of 
course.  They  might  cut  you  a  deal  upfront 
but  also  include  clauses  that  hamstring  your 
aWlity  to  renegotiate  later  —  such  as  elimi- 
ints  when  you  give  hack  licenses,  says  Wang. 


First  Steps:  Analyze,  Streamline 

Assessing  your  software  assets  and  monitoring  utilization  are  crucial 
first  steps  for  negotiations  (and.  later,  contract  compliance  audits). 

Before  sending  out  requests  for  proposak,  businesses  need 
to  analyze  tbeir  software  needs  and  streamline  those  needs  as 
much  as  possible,  says  Gartner  analyst  Bill  Snyder.  He  reconi 
mends  that  users  answer  these  two  questions;  “Is  there  a  cheaper 
alternative?  And  do  we  need  all  of  these  features  and  functions?" 

The  ability  to  predict  software  needs  is  critical  when  it 
comes  to  long-term  negotiations,  Snyder  says,  because  once  you 
deploy  a  vendor  s  ERP  or  database  system  companywide,  you're 
effectively  in  a  monopoly  relationship.  If  you  purchase  too  few 
licenses,  you'll  have  to  buy  mote  later,  losing  out  on  volume 
discounts.  If  you  buy  loo  many,  you're  paying  maintenance  and 


he  advantage  of  this  type  of  arrange¬ 


ment  is  that  the  customer  no  longer  needs  to  guess  how  many  licenses 

it  will  need  in  the  next  year  or  two,  nor  does  it  need  to  keep  track  of  li¬ 
cense  usage  kt  case  of  a  vendor  audit  Such  licenses  are  pricey,  however, 
and  work  best  when  the  software  will  get  lots  of  use,  says  IDC  analyst 
Amy  Konary. 

■  Pay  per  wave.  In  this  model,  vendors  typically  charge  an  upfront  fee 
plus  a  rate  that  scales  up  and  down  according  to  utiHzation  of  a  given  soft¬ 
ware  package.  This  option  is  catching  on  among  companies  that  are  sick 


which  features  or  software  modules  and  for  how  long. 


We  believe  there  is  no  substitute 
for  REAL  SaaS. 


Private  cloud,  hosted  client-server,  your  mother  in  law-as-a-service. 

Words  matter-don't  let  the  legacy  software  giants  confuse  the  conversation.  All  Workday  customers  share  one 
application  and  are  on  the  same  version.  Why  does  this  make  a  difference?  When  everyone  is  using  the  same 
version,  the  focus  is  on  innovation  in  the  next  release,  not  on  the  support  of  previous  versions. 
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ensure  that  you  keep  your  functionarity  and  add-ons  when  a 


rstaMis  the  software  and  a  h 


since  it  will  probabty  add  end  users  down  the  road,  says 
Graham  Crisp,  the  company's  IT  assets  director.  The  other 
option  was  to  wait  and  potentially  pay  higher  prices  when 
the  new  users  come  online. 


to  bo  more  tmoram  and  nagdMc.  If  vendor  A  is  being 
hard-nosed,  memion  that  vendor  B  is  offering  deals. 


alternative  software  offering  may  not  have  the  features  and 


Wang  says  SaaS  offerings  typically  have  about  60%  of  the 
features  provided  by  on-premises  products  -  but  that  figure 
should  go  up  to  80%  witNn  the  nert  two  years,  he  notes. 


andihdilaik.  Id  lira  yarn  nnn’t  milir  i  rlrri-inn  firrf 
on  your  personal  preferences:  figure  out  which  features  are 
critical  to  your  organization,  and  make  your  choice  on  that 
basis. 
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support  costs  for  shelfwarc  —  software  thal  sits  unused. 

Anticipating  software  needs  more  than  a  year  or  two  ahead 
can  be  tricky,  however.  For  example.  20/20  Companies,  a  sales- 
personnel  outsourcer,  originally  purchased  300  end-user  licenses 
for  Force.com.  Salesforce.com  Inc.'s  ho.sted  application  develop¬ 
ment  software.  From  there.  20/20  went  up  to  500  licenses,  which 
it  quickly  exceeded  and  expanded  to  900.  "Edging  up  means  no 
volume  discount.”  warns  Mark  Warren.  20/20's  acting  CIO. 

“You  absolutely  need  to  figure  out  your  business  software  goals 
upfront. "  says  Thomas  lefferson.  former  vice  president  of  business 
technology  at  TMP  Directional  Marketing  LLC.  While  at  TMP. 
he  had  monthly  planning  meetings  with  the  CEO.  the  CEO's 
direct  reports  and  several  business  managers.  "We  would  go  over 
what  we're  doing,  where  we're  going,  and  make  sure  this  strategy 
is  reflected  in  the  overall  IT  ro.id  map."  says  lefferson. 

TMP  has  been  discussing  the  potential  business  benefits  and  cost 
trade-offs  of  implementing  a  document  management  system,  accord¬ 
ing  to  lefferson.  (A  current  TMP  IT  executive  confirms  that.)  This 
wxHild  cut  document  access  time  and  improve  customer  service,  but  it 
would  also  require  an  expansion  of  storage  and  storage-area  network 
capacity  and  the  purchase  of  additional  licenses  for  storage  software. 
databa.ses  and  client  data  access  applications,  lefferson  notes. 

Once  TMP  a-sses.ses  what  resourc-es  the  new  system  will  require, 
it  can  go  to  vendors  and  say.  "We're  going  to  need  this  number  of 
licenses  over  the  next  three  years.  Flow  can  you  help  me  do  that 
while  taking  advantage  of  today's  prices?"  lefferson  says. 

IT  decision-makers  also  need  to  get  a  handle  on  their  own 
software  installations  —  not  just  what's  out  there,  but  who  uses  it 
when,  and  how  often.  This  is  particularly  critical  if  you're  think¬ 
ing  about  going  with  a  pay-per-usage  pricing  model. 

Over  the  past  few  years,  industry  bodies  such  as  the  international 
standards  group  ISO  have  collaborated  on  a  set  of  software  asset 
management  b^  practices  for  reducing  software  costs.  Those 
practices  include  eliminating  or  reallocating  underused  software 
licenses,  eliminating  overhead  associated  with  management  and 
support,  and  ensuring  compliance  during  vendor  license  audits. 

Effective  software  asset  management  involves  regularly  inven¬ 
torying  software  assets,  determining  usage  and  comparing  what's 
installed  with  what  the  license  agreement  entitles  you  to,  says 
Snyder.  Companies  that  do  this  "are  in  a  powerful  position  to 
drive  down  software  costs,’’  he  adds. 

Unfortunately,  many  IT  staffs  lack  documentation  for  the  com¬ 
pany’s  software  assets,  according  to  Snyder.  Software  purch^s 
are  often  made  by  individuals  or  business  groups,  with  limited 
or  no  IT  oversight.  This  limits  IT’s  ability  to  negotiate  volume 
discoums,  and  vendors  exploit  that  weakness,  Snyder  says. 

Using  Asset  Management  Tools 

Organizations  are  increasingly  using  IT  asset  management  and 
software  compliance  tools  to  get  a  handle  on  their  software 
assets  and  purchases. 

For  the  past  few  years.  Baker  Hughes  has  been  using  CA 
Inc.'s  Desktop  and  Server  Management  (DSM)  tool  to  monitor 
software  assets  on  some  30,000  machines  worldwide  so  IT  can 
determine  whether  the  numbers  are  in  compliance  with  vendor 
agreements.  "We  initUlly  found  that  we  were  overlicensed,”  says 
Crisp.  "This  is  what  we  expected,  because  people  were  buying 

Continued  on  page  29 
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support  costs  for  shelfware  —  software  that  sits  unused. 

Anticipating  software  needs  more  than  a  year  or  two  ahead 
can  be  tricky,  however.  For  example,  20/26  Companies,  a  sales- 
personnel  outsourcer,  originally  purchased  300  end-user  licenses 
for  Force.com,  Salesforce.com  Inc.’s  hosted  applicaUon  develop¬ 
ment  software.  From  there,  20/20  went  up  to  500  licenses,  which 
it  quickly  exceeded  and  expanded  to  900.  “Ed^ng  up  means  no 
volume  discount,"  warns  Mark  Warren,  20/20's  acting  CIO. 

"You  absolutely  need  to  Hgure  out  your  business  software  goals 
upfront,”  says  Thomas  Jefierson,  former  vice  president  of  business 
technology  at  TMP  Directional  Marketing  LLC.  While  at  TMP, 
he  had  monthly  planning  meetings  with  the  CEO,  the  CEO’s 
direct  reports  and  several  business  managers.  "We  would  go  over 
what  we’re  doing,  where  we’re  going,  and  make  sure  this  strategy 
is  reflected  in  the  overall  IT  road  map,”  says  lefierson. 

TMP  has  been  discussing  the  potential  buaness  benefits  and  CO 


would  also  require  an  - 

capacity  and  the  purchase  of  additional  licenses  for  storage  software, 

databases  and  client  data  access  applications,  Jefiterson  notes. 

Once  TMP  assesses  what  resources  the  new  system  will  require, 

it  can  go  to  vendors  and  say,  “We’re  going  to  need  this  number  of 
licettses  over  the  next  three  years.  How  can  you  help  me  do  that 
while  taking  arlvantage  of  today’s  prices?”  Jefferson  says. 

IT  decision-makers  also  need  to  get  a  handle  on  their  own 
software  installations  —  not  just  what’s  out  there,  but  who  uses  it 
when,  and  how  often.  This  is  particularly  critical  if  you’re  think¬ 
ing  about  going  with  a  pay-pet-usage  pricing  model. 

Over  the  past  few  years,  industry  bodies  such  as  the  irrtertrational 
standards  group  ISO  have  collaborated  on  a  set  of  software  asset 

practices  irtdude  diminating  or  reallocatit^  underused  software 


Effective  software  asset  management  involves  regularly  in' 
torying  software  assets,  detentrining  usage  and  comparing  what’s 
installed  with  what  the  Ucense  agreement  errtitles  you  to,  says 
Snyder.  Companies  that  do  this  "are  in  a  powerful  position  to 
drive  down  software  costs,”  he  adds. 

Unfortunately,  many  IT  staffs  lack  documentation  for  the  corn- 
party’s  software  assets,  according  to  Snyder.  Software  purchases 
are  often  made  by  individuals  or  business  groups,  with  limited 
or  no  IT  oversight.  This  limits  ITs  ability  to  negotiate  volume 
discounts,  and  vendors  exploit  that  weakness,  Snyder  says. 


Usii«  Asset  Management  Tools 

Organizations  are  increasing  using  IT  asset  management  and 
software  compliance  tools  to  get  a  handle  on  their  software 
assets  and  purchases. 

For  the  past  few  years.  Baker  Hughes  has  been  using  CA 
Inc.’s  Desktop  and  Server  Management  (DSM)  tool  to  monitor 
software  assets  on  some  30,000  machines  worldwide  so  IT  can 
determine  whether  the  numbers  are  in  compliance  with  vendor 
agreements.  “We  initially  found  that  we  were  overlicensed,”  says 
Crisp.  “This  is  what  we  expected,  because  people  were  buying 

Contmuedonpogexp 


20  co.P«  ITEIWORLO  DECEMBER  6. 


MITSIoan 

Management  Review 


An  MITSIoan  Management  Review  Sopplemenl 


THE  NEW  INTELLIGENT  ENTERPRISE 


The  New  Role.* 

ofl  I 


Ten  years  ago,  executives  looked  to 
IT  for  technical  solutions  to  support 
business  units.  Today,  analytics  has 
dramatically  changed  that  function, 
says  Beth  Holmes,  IT  Analytics 
Lead  for  Monsanto.  Now  IT 
managers  are  sought  after  for  the 
answers  they  can  provide  to  build 
competitive  advantage  and  guide 
strategic  decision  making. 


From  the  Editor-in-Chief,  MIT  Sloan  Management  Review 

With  a  Ph.D.  in  plant  breeding  and  genetics  and  years 
of  information  technology  project  management, 
Beth  Holmes  brings  the  discipline  of  a  scientist  to 
her  role  as  IT  Analytics  Lead  at  Monsanto  Company,  the 
seed  and  crop  protection  chemical  company. 

In  its  essence,  her  job  is  to  answer  questions  for  the  company 
through  exploratory  analytics.  Her  group  scopes  out  high-value 
targets,  does  cost  modeling,  looks  at  sales  forecasting,  and  uses  mul¬ 
tiple  methodologies  to  aid  long-range  planning.  These  can  include 
testing  assumptions  about  the  macroeconomic  drivers  behind  the 
trends  in  agriculture.  “Understanding  the  possibilities  of  things  that 
may  happen  are  really  critical  to  our  ability  to  operate  profitably,” 
Holmes  says. 

“Five  years  ago,  people  would  have  viewed  analysis  as  almost 
synonymous  with  repotting,"  she  says.  But  seeing  what  analytics  can 
do  is  starting  to  change  what  executives  ask  for.  “The  work  changes 
the  conversation  that  IT  has  with  the  business  units,"  says  Holmes. 
“It  changes  the  perspective  of  the  value  that  IT  brings.” 

Holmes  spoke  about  myth-busting,  question-asking,  and  why  the 
simplest  solution  is  often  the  smartest  with  MIT  Sloan  Management 
Keview  Editor-in-Chief,  Michael  S.  Hopkins. 

Continued  on  page  2 


Smarter  technology  for  a  Smarter  Planet 

What  99.9%  system  uptime 
means  to  a  kilo  of  gold. 


I  MIT  Sloan  Management  Heview  Supplement 


CMtinutd  from  page  2 

“You  need  the 
best  information 
possible  for  a 
variety  of  deci¬ 
sions  that  range 
all  the  way  from 
daily  ops  to  stra¬ 
tegic  planning.' 


That's  veiy  interesting.  How  did  you  come  to  that 
conclusion? 

In  individual  solutions,  the  tendency  is  to  beat  the 
bushes  to  wring  out  everything  you  can.  But  the  effi¬ 
ciency  of  that  solution  may  not  be  enough  to  warrant 
the  effort.  So  you  have  to  exercise  judgment.  We  do  that 
by  always  starting  with  a  baseline  that’s  either  the  exist¬ 
ing  methodology  or  the  simplest  solution  possible.  We 
generate  that  first,  and  then  everything  else  we  do  is  an 
effort  to  beat  it. 

What  has  surprised  you  as  you've  done  this  work 
over  the  last  couple  of  years? 

About  two  years  ago  there  was  a  recognition  that  we’re 
a  data-rich  company,  but  to  some  degree  there  was  still 
some  “sitting  on  the  edge  of  the  pool"  in  terms  of  ana¬ 
lytics  while  we  were  assessing  all  the  components  we 
would  need  to  have  in  place  to  bring  this  capability  for¬ 
ward.  Our  new  hypothesis  was  that  maybe  you  don’t 
need  to  have  everything  in  place  in  order  to  start. 

We  did  sotiK  work  in  sales  forecasting  svhich  didn’t 
really  take  that  much  effort,  but  it  really  helped  our  sales 
organization  improve  their  forecast  accuracy  early  in 
the  season.  It  doesn’t  uke  long  to  do  the  analysis,  and 
the  return  is  huge.  So  our  hypothesis  was  proven  out. 
That’s  a  big  learning. 

Operationally  speaking,  the  amount  of  time  that  we 
actually  spend  prepping  data  versus  doing  the  analysis 
seems  surprising.  For  the  exploratory  work,  maybe  we 
spend  three-fourths  of  out  time  getting  the  dau  ready 


and  another  quarter  of  out  time  selecting  the  analysis, 
running  it,  and  interpreting  it.  But  we  can  complete 
these  projects  on  a  relatively  short  cycle,  and  the  benefit 
that  is  gained  in  a  really  short  time  period  is  just  phe¬ 
nomenal.  Using  analytics  itself  to  figure  out  what  dau 
elements  we  need  to  go  after  and  first  making  sure  that 
those  are  correct  can  narrow  the  field  of  high-value  tar¬ 
gets  enough  that  it’s  somethii^  that  people  can  sUtt  to 
get  their  heads  around  and  plan  for. 

Do  you  think  this  kind  of  burgeoning,  centralized 
analytics  capability  should  be  housed  in  fl? 

Yes,  1  do.  The  reality  is  that  IT  has  alvrays  been  a  great 
place  to  be  for  perspective  into  the  different  business 
domains.  When  you  underscore  that  with  the  imple¬ 
mentation  capability  that  being  in  an  IT  organization 
can  bring,  it  is  a  natuul  fit. 

There  are  really  some  great  analytical  minds  at  this 
company  in  many  different  business  units.  They  net¬ 
work  informally  together,  and  we  have  both  formal  and 
informal  relationships  with  a  variety  of  the  people  doing 
analysis  all  over  the  company.  1  would  say  that  the  only 
formal  cross-business-unit  analytics  capability  is  fixed 
in  IT.  However,  having  a  centralized  analytics  capaMity 
doesn’t  mean  it’s  diminished  at  the  point  of  need.  They 
augment  each  other.  In  foct,  we  actually  accderate  the 
efforu  of  others. 


Continued  on  page  4 


'  SmaileriUEhnology  for  a  Smartar  Planet: 

What  database  integration  means 
to  this  blood  sample. 

It  means  doctors  in  Ethiopia  will  be  able  to  instantly  compare  this  blood  sample  to  over  41,000  HIV  treatment 
histories  to  help  their  patients  receive  the  best  treatment  regimen  possible.  The  EuResIst  Network  is  helping 
doctors  predict  patient  response  to  various  HIV  treatments  with  over  78%  accuracy— outperforming  9  out  of  10 
hufhan  experts  in  a  recent  study.  The  tool  is  built  on  an  IBM  analytics  solutbn  that  integrates  a  variety  of  disparate 
databases  onto  a  flexible  IBM  DB2*  platform  to  process  complex  metadata  more  effectively  than  anything  else 
on  the  martet  A  smarter  organization  is  built  on  smarter  software,  systems  and  services. 


>uild  a  smarter  planet,  ibm.com/hospital 


The  best  leaders 
are  inquisitive 
and  resource¬ 
ful  in  their  use 
of  data  and  the 
talent  to  analyze 
the  data,  but 
also  decisive  and 
willing  to  take 
the  action  based 
on  data." 


aNIIty  of  information  and  the  changing  nature  of 
analyzing  it  going  to  aher  how  companies  work? 

The  expectation  of  having  analytical  resulU  available  to 
make  a  decision  early  on  is  increasing.  As  higher  quality 
information  becomes  avaUable  foster,  we  need  to  be 
poised  to  make  decisions  foster  and  take  action  as  well. 
And  I  think  that  means  that  you  have  to  have  some  dif¬ 
ferent  skill  sets  available  to  design  and  execute  analyses. 

You  can  acquire  capability  in  terms  of  the  computa¬ 
tional  power  that’s  required  to  generate  some  analyses. 
But  you  also  have  to  invest  in  the  talent  within  your 
organization  that  really  understands  what  the  analyses 
mean  and  can  think  about  things  objectively.  The  value 
of  having  a  group  in  information  technology  is  that 
they  can  step  back  from  the  individual  business  units 
ink  about  the  problems  and  solutions  objectively 


We've  seen  that  sometimes  people  in  positions 
of  power  don't  want  to  cede  their  instincts  to 
analytically-driven  insights.  Have  you  encountered 


It’s  interesting.  You  see  a  variety  of  responses  to  the 
group,  everything  ranging  from,  “Wow,  this  is  awe¬ 
some,  we  needed  a  group  that  we  could  turn  to  for  help 
with  these  things,’  to  some  self-consciousness  and 
concern  about  the  analytical  effort  being  an  evaluation 
riKthodology. 

We  typically  get  past  that  by  collaborating  deeply  and 
closely  with  the  business  unit  that  we’re  workii^  on  a 
solution  for.  They  learn  as  they  work  through  these  solu¬ 
tions  with  us,  and  that  improvement  in  their  knowledge 
base  translates  out  into  their  organization  in  a  ripple 
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software  as  needed,  rather  than  going  to  the  trouble  of  figuring 
out  if  we  had  additional  licenses  to  spare.”  The  company  recently 
deployed  CA’s  Software  Compliance  Manager,  which  autoroati- 

CA's  DSM  also  includes  a  metering  tool  that  reports  not  only 
on  used  and  unused  licenses,  but  also  on  licenses  that  haven’t 
been  executed  within  a  predefined  time  frame.  “This  will  eitable 
IT  to  harvest  licenses  that  are  just  sitting  on  someone’s  desktop 
and  redejdoy  them,"  says  Crisp. 

Asset  management  tools  need  to  be  backed  up  by  organization¬ 
al  practices  such  as  systematic  enforcement  of  software  retire¬ 
ments.  says  Snyder.  Otherwise,  data  center  administrators  may 
keep  an  old  system  tunning  while  a  new  system  is  being  tested 
and  deployed  but  then  forget  to  delete  it,  he  adds.  Be  aware,  too, 
that  some  software  packages  don’t  remove  everything  from  the 
registry  when  you  delete  a  program,  or  they  may  allow  two  ver¬ 
sions  of  the  same  program  to  coexist. 

Baker  Hughes  recently  instituted  a  practice  of  assigning  software 
to  computers  rather  than  to  individuals.  Crisp  says.  “When  we 
decommission  a  computer,  we  harvest  all  software  associated  with 
it  and  tense  it  more  efectively,”  he  notes.  The  payback:  Microsoft 
enterprise  license  usage  has  stayed  Bat,  even  though  the  company 
has  purchased  additional  machines  and  equipment.  Crisp  repmrts. 

Centralizing  software  administration  has  enabled  Crisp’s 
group  to  accurately  charge  business  units  for  software  costs. 
Further,  “it  definitely  helps  us  get  volume  discounts,"  he  says. 

However,  asset  management  tools  have  yet  to  catch  up  with 
per-usage  pricing  models  offered  by  SaaS  and  virtualization 
vendors,  cautions  IDC’s  Konary. 

Time  to  Bargain 

Providing  usage  statistics  to  a  vendor  can  give  you  leverage  at 

the  negotiating  table  —  as  long  as  you  know  how  to  bargain. 

For  example,  if  your  vendor  insists  on  invoking  a  contract  clause 
that  penalizes  you  for  giving  back  unused  licenses,  ask  if  you  can 

reallocate  the  cost  of  those  licenses  to  other  products  that  you  do 

need.  Altimeter’s  Wang  advises. 

Orre  way  you  can  get  your  enterprise  software  vendor  to  listen 
is  to  mention  that  you’re  considering  going  with  an  alternative 
product,  such  as  an  open-source  or  SaaS  offering. 

Mosaic,  an  Omahahased  oiganization  serving  people  with  intel¬ 
lectual  disabUities,  wound  up  going  with  open  source  even  though 
it  hadn’t  originally  planned  to  do  so.  As  part  of  a  desktop  virtualiza¬ 
tion  project,  the  nonprofit  compared  existing  MiciDSoft  products  to 
Linux  altematives  and  found  that  the  latter  offered  major  savings 

in  license  fees,  iirbouse  IT  infrastructure  needs  and  staff  costs,  says 

Thomas  Keown,  dab  storage  and  security  administrator  at  Mosaic. 

Keown  conservatively  estimates  that  moving  to  open-source 
software  has  saved  Mosaic  $465,000  annually,  or  about  19%  of  its 
IT  builget.  The  organization  has  about  1,500  users  nationwide. 

But  IT  deciskm-makets  should  thcHOughly  evaluate  the  cost-benefit 
uadeofe  of  an  alternative  type  of  software.  While  moving  to  open 
source  was  the  right  choice  tw  Mosaic,  "every  company  has  to  do  its 

costs,  Keown  says.  Particularly  in  larger  companies,  integrating 

open-source  software  with  existing  IT  systems  can  be  a  problem. 

Support  can  also  be  an  issue,  says  Wang.  If  you’re  installing  Unux 
software  and  you  don’t  want  to  pay  for  outside  help,  he  says,  "you 


1  a  team  that’s  trained  in 


:  airy  open-source  product  you’re  considering  has  an  active 
online  support  comnmnity,  "Look  at  forums  and  bulletin  boards  and 
see  how  fast  someone  responds  when  you  post  an  issue,"  he  says. 

SaaS,  too.  can  provide  significant  cost  savings  over  traditional 

For  small  and  midsize  organizations,  a  hosted  solution  pro¬ 
vides  access  to  high-end  systems  and  expertise  they  might  not  be 
able  to  afford  otherwise,  says  Wang.  For  example,  when  ao/ao’s 
Warren  evaluated  tools  for  building  a  customized  CRM  system, 
he  found  that  Fotce.com  would  cost  about  75%  less  than  a  com¬ 
parable  packaged  offering.  Factors  that  drove  up  the  cost  of  an 
on-premises  product  included  licenses  and  the  need  for  in-house 
IT  infrastructure  to  support  the  software. 

However,  a  large  enterprise  often  already  has  most  of  the  IT 
resources  needed  to  support  a  new  application.  Further,  it  can 
depreciate  the  underlying  hardware  —  which  it  can’t  do  with 
monthly  SaaS  fees. 

Of  course,  SaaS  providers  are  just  as  profit-oriented  as  tradi¬ 
tional  software  vendors  and  can  be  hard  bargainers  themselves, 
says  Warren.  For  instance,  Salesforce.com  ofered  a  discourU  in 
return  for  20/20  agreeing  to  purchase  both  developer  and  end- 
user  licenses  as  soon  as  the  contraCT  was  signed.  But  development 
stretched  out  for  two  more  months,  during  which  time  20/20 
paid  maintenance  and  support  for  end-user  software  it  wasn’t 
using.  “We  probably  should  have  held  out  for  buying  the  end-user 
licenses  once  the  development  was  completed."  says  Warren, 

Moreover,  customers  that  expect  SaaS  to  be  strialy  pay-per- 
usage  are  often  disappointed,  says  Gartner’s  Snyder.  In  exchange 
for  a  good  deal,  “many  providers  want  a  three-year  agreement 
with  a  guaranteed  minimum  usage,"  he  says. 

Even  if  you’re  not  ready  to  go  with  an  alternative  like  SaaS  or 
open  source,  it  doesn’t  hurt  to  let  your  vendor  know  that  you’re 
exploring  those  options,  says  Snyder.  Vendors  will  be  more  willing 

to  negotiate  seriously  "when  true  competition  is  a  factor,"  he  adds. 

Not  Too  Rough 

But  don’t  treat  your  vendor  like  an  enemy.  Hard-nosed  negotiat¬ 
ing  is  fine  up  to  a  point,  but  "price  and  licensing  discuswns  are 
very  much  part  of  a  long-term  relationship.”  Konary  says. 

“You  may  get  the  best  price  in  the  world."  says  TMP’s  Jefferson, 
"but  if  you  alienate  your  vendor,  you  may  not  get  the  support  and 
service  you  need." 

For  example,  TMP  went  through  a  workforce  reduction  re¬ 
cently,  but  the  company’s  contract  with  Mictosoft  didn’t  allow  it 
to  reduce  the  number  of  licenses  it  paid  for  to  reflect  the  decrease 
in  the  number  of  end  users.  Nonetheless.  Microsoft  agreed  to 
renegotiate  the  three-year  agreement  so  TMP  wouldn’t  have  to 
pay  for  the  licenses  it  wouldn’t  be  using,  Jefferson  notes.  He  gives 
the  economic  downturn  partial  credit  tor  the  software  giant’s 
willingness  to  cut  TMP  some  slack.  More  important,  however, 
was  TMP’s  partnership  with  Microsoft.  As  part  of  that  relation¬ 
ship,  Jefferson  says,  “we  put  all  our  cards  on  the  table"  and  keep 
the  vendor  fully  informed  of  business  plans  and  software  needs. 

TMP  does  that  with  all  of  its  vendors,  Jefferson  says;  "We’d  bring 

them  in  and  say.  'Here’s  what  we’re  doing;  vw 
our  spend.’  Oftm,  they  come  up  with  innova 
Horwttt  is  a  freelance  reporter  and  o  former  ComputerworH  set 
editor.  Conioct  herol  ehofUPitl@verizon.net. 
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More-efficient  network 
equipment  designs 
could  soon  help  reduce 
data  center  power 
and  cooling  costs. 

BY  ROBERT  L.  MITCHELL 


Servers  get  host  of  the  glory 

when  it  comes  to  energy  manage¬ 
ment,  but  networking  gear  is 
about  to  catch  up. 

Over  the  past  year,  network 
equipment  vendors  have  begun  to 
emphasize  energy-efficiency  fea¬ 
tures,  something  that  was  never 
a  top  priority  before,  says  Dale  Cosgro,  a  product 
manager  in  Hewlett-Packard  Co.’s  ProCurve  network 
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Networking  infrastructure  isn’t  in  the  same  class  generates  mote  heat  than  many  server  racks.— 

as  servers  or  storage  in  terms  of  overall  power  con-  enough  that  it  requires  careful  attention  to  cooling, 

sumption  -  there  ate  far  more  servers  than  switches  By  way  of  comparison,  most  data  centers  top  out  at 

-  but  networking  can  account  for  up  to  15%  of  the  between  8kW  and  tokW  for  server  racks,  says  Rakesh 

total  power  budget.  Kumar,  an  analyst  at  Gartner  Inc.  The  average 

And  unlike  servers,  which  have  sophisticated  power  cabinet  consumes  about  4kW,  says  Peter  Gross,  vice 
management  controk,  networking  equipment  must  presideut  and  general  manager  of  HP  Critical  Facili- 

always  be  on  and  ready  to  accept  traffic.  ties  Services. 

Also,  networking  power  use  at  the  rack  level  is  Vendors  have  alre^y^opted  some  ener^-related 

significant.  A  Cisco  Catalyst  6500  series  switch  features,  such  as  high-efficiency  power  supplies 

consumes  as  much  as  zkW  to  3kW  pet  42U-high  rack.  and  variable-speed  cooling  fans.  But  with  switches, 

Cisco  Systems  Inc.’s  largest  enterprise<lass  switches,  there’s  a  limit  to  what  can  be  done  in  the  area  of 
the  Nexus  7000  series,  can  consume  as  much  as  power  management  today.  Most  idle  switches  still 

i3kW  per  rack,  according  to  Rob  Aldrich,  an  architect  consume  40%  to  60%  of  maximum  operating  power, 
in  Cisco’s  advanced  services  group.  A  ykW  cabinet  Anything  less  than  40%  compromises  performance, 
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says  Aldrich.  "Unless  useis  want  to  accept  latency, 
you  have  to  have  the  power,"  he  adds. 

But  ht^  improvements  are  coming,  says  Cosgro. 

More-Effkieiit  TedinologY 

Technology  improvements  that  favor  energy  efficien¬ 
cy  are  gradually  errterging  in  several  areas.  "As  new 
generations  of  products  hit  the  market,  more  of  these 
kinds  of  features  will  be  implemented,”  says  Cosgro. 

Some  examples  include  more  modular  application- 
specific  integrated  circuit  (ASIC)  derigns  that  allow 
switches  to  turn  off  components  not  in  use,  from  LED 
panel  lights  to  tables  in  merttoty. 

Also,  general  advances  in  silicon  technology  will 
mirrimize  current  leakage  and  gradually  boost  energy 
efficiency  with  each  new  generation  of  drips.  Eventu¬ 
ally,  says  Cosgro,  "we  should  be  able  to  get  networking 
equipment  that  uses  lOO  watts  today  down  to  to  watts.” 

Improvements  in  rrther  areas  have  also  helped. 
Softv^,  for  example,  is  now 
mote  efficient,  cottsumirtg 
fewer  CPU  cycles  —  and  less 
energy.  Arid  hardware  is  now 
desigtied  to  run  at  higher 
operating  temperatures  to 
r^uce  cooling  costs. 

For  exam{de,  Cosgro 
claims  that  HP’s  current 
ProCurve  equipirrent  can  tun 
safely  at  temperatures  up  to 
130  degrees  —  higher  than 
the  spedfications  for  most 
other  data  cemet  equipment. 

"That's  driven  by  require¬ 
ments  of  IT  managers  who 


vendors  will  need  to  do  a  better  job  of  testing  in  m 


and  other  types  of  equipment  will  react  when  sitting 
next  to  servers  that  displace  more  BTUs,"  says  Drue 
Reeves,  an  analyst  at  Burton  Group.  Today,  each 
vendor  tests  with  orrly  its  own  equipment. 

Mote  sophisticated  power-monitoring  systems  will 
also  help  save  energy,  as  will  management  tools  with 


Reaktime  power  and  temperature  monitoring  is  key 
to  any  data  center  and  is  essential  for  managirg  growth. 

"If  something  is  not  ri^,  yoit  want  to  know  about  it 
before  a  catastrophe  happ^,”  says  Rockwell  Bonecut- 
ter,  global  lead  of  Accenture  Ltd.’s  green  IT  practice. 

Management  software  could  be  configtrred  to 
identify  specific  network  equipmem,  such  as  voke- 
over-lP  phones,  by  using  the  Link  Layer  Discovery 
Protocol.  The  software  could  then  automatically  shut 
off  Power-over-Ethemet  current  tar  VoIP  handsets  at 
a  specific  time  of  day  or  when  the  associated  PC  on 
each  desktop  is  turrred  off  at  day’s  end. 


nected  to  two  routers  for  redurrdancy  during  the  day, 
but  a  network  could  be  configured  to  have  one  router 
gp  irrto  low-power  sleep  mode  at  rright.  The  sleeping 

router  would  "wake  up”  only  when  or  if  it  was  needed. 

These  types  of  anrlications  represent  “a  huge  op¬ 
portunity  for  savings,”  says  Cosgro. 

Better  Standards 

Emerging  standards  could  soon  help  save  energy  during 
periods  when  networks  sit  imused  and  will  he^  IT 
compare  the  relative  efficiency  of  competing  products. 

The  new  IEEE  P8o2.3az  Energy  Efficient  Ethernet 
(EEE)  standard,  approved  on  Sept.  30,  may  offer  the 
biggest  bar^  fin  the  buck  by 
cutting  power  consumption 
for  network  equipment  when 


Today,  Ethernet  devices 
continuously  transmit  power 
between  devices,  even  when 
network  traffic  is  at  a  stand- 


a  pulse  periodically  but  stay 
quiet  the  test  of  the  time, 
cuttir^  power  use  by  mote 
than  90%  durirtg  idle  periods. 

In  a  large  network,  that’s 
“a  whole  lot  of  energy”  that 
could  be  saved,  Cosgro  says. 

The  standard  will  allow 
“downshifting”  in  other  modes 
of  operation  as  well.  In  a 
roGbit  switch,  for  example, 

Cnttinuedonpogeyb 
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NETWORKING 


If  something  is 
not  right  Dn  the 
datacenter], 
you  want  to 
know  about  it 
before  a  catas¬ 
trophe  happens. 


says  Aldrich.  "Urfless  users  want  to  accept  latency, 
you  have  to  have  the  power,"  he  adds. 

But  huge  improvements  are  coming,  says  Cosgro. 

More-Efficieiit  Technology 

Technology  improvements  that  favor  energy  efficien¬ 
cy  are  gradually  emerging  in  several  areas.  "As  new 
generations  of  products  hit  the  market,  more  of  these 
kinds  of  features  will  be  implemented,"  says  Cosgro. 

Some  examples  include  mote  modular  application- 
specific  integrated  circuit  (ASIC)  designs  that  allow 
switches  to  turn  off  components  not  in  use,  from  LED 
panel  lights  to  tables  in  memory. 

Also,  general  advances  in  silicon  technology  will 
minimize  current  leakage  and  gradually  boost  energy 
efficiency  with  each  new  generation  of  chips.  Eventu¬ 
ally,  says  Cosgro,  “we  should  be  able  to  get  networking 
equipment  that  uses  too  watts  today  down  to  to  watts," 
Improvements  in  other  areas  have  also  helped. 
Software,  for  example,  is  rmw 
more  efficient,  consuming 
fewer  CPU  cycles  —  and  less 
energy.  And  hardware  is  now 


operating  temperatures  to 
reduce  cooling  costs. 

For  example.  Cosgro 
claims  that  HP's  current 
ProCurve  equipment  can  run 
safely  at  temperatures  up  to 
tyo  degrees  —  higher  than 
the  specifications  for  most 
other  data  center  equipment. 
“That's  di  iven  by  require¬ 
ments  of  IT  managers  who 

higher  temperatures,”  he  says. 

It  trtay  be  possible  to  move 
to  higher  operating  tempera¬ 
tures  in  a  single-vendor  wiring 
closet,  but  network  equipment 


>  a  better  job  of  testing  in  mixed 


degrees  can  be  sustained  —  especially  within  racks 
in  the  data  center.  "No  one  knows  how  networking 
and  other  types  of  equipment  will  react  when  sitting 
next  to  servers  that  displace  more  BTUs,”  says  Drue 
Reeves,  an  analyst  at  Button  Group.  Today,  each 
vendor  tests  with  only  its  own  equipment. 

Mote  sophisticated  power-monitoring  systems  will 
also  help  save  energy,  as  will  management  tools  w  ith 

Re  Jtime  power  and  temperature  monitoring  is  key 
to  any  data  center  and  is  essential  for  managing  growth. 
"If  something  is  not  tig)it,  you  want  to  know  about  it 
before  a  catastrophe  happens,”  says  Rockwell  Bonecut- 
ter,  global  lead  of  Accenture  Ltd.'s  green  IT  practice. 

Management  software  could  be  configured  to 
identify  specific  network  equipment,  such  as  voice- 
over-IP  phones,  by  using  the  Link  Layer  Discovery 
Protocol.  The  software  could  then  automatically  shut 
off  Power-over-Ethernet  current  for  VoIP  handsets  at 
a  specific  time  of  day  or  when  the  associated  PC  on 
each  desktop  is  turned  off  at  day's  end. 

Another  example;  Edge  switches  are  typically  con¬ 
nected  to  two  routers  for  redundancy  during  the  day, 
but  a  network  could  be  configured  to  have  one  router 
go  into  low-power  fleep  mode  at  night.  The  sleeping 
router  would  “wake  up"  only  when  or  if  it  was  needed. 

These  types  of  applications  represent  “a  huge  op¬ 
portunity  for  savings,"  says  Cosgro. 

Better  Standards 

Emerging  standards  could  soon  help  save  eneigy  during 
periods  when  networks  sit  unused  and  will  help  IT 
compare  the  relative  efficiency  of  competing  products. 

The  new  IEEE  PSoz.saz  Energy  Efficient  Ethernet 
(EEE)  standard,  approved  on  Sept.  30,  may  offer  the 
biggest  bang  for  the  buck  by 
cutting  power  consumption 
for  network  equipment  when 


Today,  Ethernet  devices 
continuously  transmit  power 
between  devices,  even  when 
network  traffic  is  at  a  stand¬ 
still.  Equipment  suf^rting 
the  EEE  standard  will  send 
a  pulse  periodically  but  stay 
quiet  the  rest  of  the  time, 
cutting  power  use  by  more 
than  90%  during  idle  periods. 

In  a  large  network,  that's 
“a  whole  lot  of  energy”  that 
could  be  saved,  Cosgro  says. 

The  standard  will  allow 
"downshifting”  in  other  modes 
of  operation  as  well.  In  a 
loGbit  switch,  for  example, 

Coittinued  on  page  36 
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individua]  ports  that  are  supporting  only  a  iGbit  load 
will  be  able  to  drop  power  down  from  loGbit/sec.  to 
what’s  required  to  support  a  iGbit/sec.  configuration, 
saving  energy  until  activity  picks  up  again. 

Products  buik  to  support  the  EEE  standard  should 
start  appearing  by  2011,  says  Aldrich. 

Another  etneiging  teclmology,  the  PCI-SIG’s  Multi- 
Root  lyO  Virtualization  specification,  gives  servers 
within  a  rack  access  to  a  shared  pool  of  network  inter¬ 
face  cards.  This  happens  via  a  high-speed  PCI  Eapress 
bus  —  essentially  extending  the  PCIe  bus  outside  of 
the  server.  “Instead  of  a  [netwoik  interface  card]  in 
every  server,  you'll  have  access  to  a  bank  of  NICs  in 

of  one  of  those  NlCs  to  a  server,"  probably  using  tools 


provided  by  the  server  vendor,  says  Reeves. 

Energy  savii^  will  come  from  increased  utilization 
of  the  netwotk  —  achieved  by  splitting  up  the  band¬ 
width  in  each  “virtual  NIC”  —  and  the  need  for  fewer 
NICs  and  switch  ports,  he  says.  He  expects  to  see 
standards-compliant  products  perhaps  as  early  as  2012. 

Energy-Efficiency  Ratings 

Finally,  standardized  measurements  of  energy  ef¬ 
ficiency  have  started  to  appear  on  some  networking 
equipment,  hiniper  Networks  Inc.,  for  example, 

includes  the  Energy  Consumption  Rating  on  the  data 

sheets  for  some  of  its  products.  ECR  is  a  draft  speci¬ 
fication,  created  by  the  ECR  Initiative  consortium. 
Lawrence  Uvermore  National  Laboratory,  Ixia  and 
Juniper  developed  the  specification,  which  measures 
performance  per  energy  unit  for  networking  and 
telecommunications  equipment. 

Both  Cisco  and  Juniper  are  backing  the  Alliance 
for  Telecotnmunications  Industry  Solutions'  Telecom- 

which  AXIS  introduced  last  year. 

However,  neither  specification  has  been  universal¬ 
ly  accepted.  Juniper  supports  ECR  but  doesn’t  include 
the  rating  on  all  of  its  products'  data  sheets.  Cosgro 
says  HP  hasn’t  included  either  of  those  energy- 
efficiency  standards  in  its  data  sheets  because  users 
don’t  understand  the  metrics.  “What  they  cate  about 
is  the  number  of  watts  used,"  he  says. 

Another  strike  against  the  speci^tions,  Cosgro 
says,  is  that  they  lack  a  detailed,  open  rating  method¬ 
ology.  'That  means  vendors  can  choose  rating  firms 
that  use  methodologies  that  best  suit  their  needs. 

A  truly  open  specification  isn’t  likely  to  appear 

tal  Protection  Agency  starts  work  on  an  Energy  Star 
rating  for  large  networking  equipment. 

The  agency  announced  an  Etiergy  Star  specifica¬ 
tion  for  data  centers  in  June  and  plans  to  eventually 
develop  qiecificaticHis  for  data  center  UPSs  and 
coolii^  systems,  according  to  a  q»kestnan.  These 
new  specifications,  which  will  cover  everything  from 
power  supplies  and  internal  chips  to  Energy  Efficient 
Ethernet,  will  be  “the  key  energy-efficiency  standard" 
goir^  forward,  Cosgro  says. 

The  easiest  way  to  increase  energy  efficiency  is  to 
buy  new  equipment,  but  that’s  not  necessarily  a  jrac- 

beskfes  potential  energy  savings  —  such  as  the  re¬ 
maining  useful  life  of  their  current  equipment.  A 15% 

cut  in  energy  costs  may  add  up  when  spread  across 
thousands  (rf  servers,  but  the  total  savings  would  be 
much  smaller  on  a  few  racks  of  switches. 

Even  for  a  single  tack,  the  cost  pet  kilowatt  usually 
won’t  justify  an  upgrade.  “Most  people  will  not  save 
enough  energy  in  the  short  tun  to  justify  replacing 
their  equipment,”  warns  Button  Group’s  Reeves. 
“Stay  on  your  tegular  life  cycle."  • 


36 


Discussion 

Underway 


(want  in?) 


Tilt;  Computorworld  Linkedin  Forum 
IS  a  community  for  all  tilings  IT 
news,  analysis  and  discussion  ,ii 
to|3ics  within  IT,  including  careers, 
management  and  hot  topics. 

If  you  are  an  enterprise  IT  practitioner 
at  any  level  we'd  lo ,  '  havv' you  join. 

Apply  for  memt  .  ■  ■  :  *■  ' ;  'v  '<* 


COMPUTERWORID 

on  Linked  in 


E-DISCOVERY 


ird 
‘cnes 

DI^PCHNT 

Lawyers  are  using  old  search 
technologies  that  don’t  find  all  of  the 
relevant  documents.  BvaHOYWAXER 


u\ 


Document  dump.-  “Unsearchabfe  morass.”  That’s  how 

Ontario  Superior  Court  Justice  Caiy  Boswell  described 
the  nearly  23  million  pages  of  etectronic  records 
handed  over  by  the  prosecution  in  an  ongoing  criminal 
hand  case  of  three  former  Nortel  Networks  executives. 

During  a  hearing  last  December,  defense  lawyers  argued  that 
the  sheer  amount  of  material  provided  on  a  hard  drive  —  the 
equivalent  of  8,000  to  10.000  boxes  of  paper  —  was  so  “stag- 


never  grang  to  be  aUe  to  say  that  you  turned  over  every  strme,” 

warns  Susan  Wortzman,  a  partner  at  Wortzman  Nickle  PC,  a 
Toronto  law  firm  specializing  in  CHliscovery. 

One  problem  with  today's  search  tools  is  the  prevalence  of  false 


1  specified  term,  regardless  of  context  The  result  is  a  c 
files  that  ate  often  irrelevant  to  a  legal  team.  For  example,  a  search 
for  the  word  record  could  turn  up  documents  related  to  a  Beatles 
album,  a  Guinness  world  record  or  a  recorded  message. 

ings  can  easily  fell  through  the  cracks  of  a  standard  keyword 
search.  Then  there’s  the  inherem  ambiguity  of  language,  the 
combination  of  text  and  images,  and  the  introduction  of  errors 

by  optical  character  recognition  software  —  all  factors  that  can 

significantly  impair  the  e-discovery  process. 

“Keyword  searching  is  a  blrmt  instrument,”  laments  Patrick 
Dot,  co-founder  of  the  nonprofit  Electronic  Discovery  Institute 
and  former  director  of  electronic  discovery  at  Verizon  Communi- 


The  Human  Factor 

One  way  to  improve  document  searches  is  to  put  a  human  expert 

—  who  knows  the  tope  and  terminology  —  in  the  loop,  says 

Gordon  Cormack,  coordinator  of  TREC’s  legal  track  and  a  profes¬ 
sor  of  comjmter  science  at  the  University  of  Waterloo. 

“You  can  do  a  lot  better  job  of  searching  for  relevant  docu¬ 
ments  if  you  use  a  combination  of  an  expert  who  knows  the  data 

set  working  with  individuals  who  are  actually  running  auto¬ 
mated  search  queries,”  agrees  Jason  Baron,  director  of  litigation 
at  the  U.S.  National  Archives  and  Records  Administration  and  a 

founding  coordinator  of  the  TREC  legal  track. 
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We  have  vast  needles 
in  haystacks,  and  we’re  not 
using  state-of-the-art  search 
techniques  to  find  them. 


Meanwhile,  vendors  are  scrambling 
to  provide  alternative  search  tech- 

of  today  s  tools.  E-discovery  software 
vendor  Clearwell  Systems  Inc.,  for 
example,  has  developed  what  it  calb 
“transparent  search,”  lets  users 
sdect  specific  variations  of  keywords  to 
reduce  the  likelihood  of  false  positives. 

With  ClearweU’s  tool,  a  user  could 
conduct  a  keyword  search  for,  say,  the 
word  ^Isc  that  catches  derivations  such 


GORDON  CORMACK,  COORDINATOR. 
TEXT  RETRIEVAL  CONFERENCE  LEGAL  TRACK 


indexing)  that  determine  the  prob¬ 
ability  that  a  document  has  a  particular 
term  or  concept. 

Ultimately,  the  best  approach  might 
be  a  combination  of  the  new  search 
technologies.  “A  startling  statistk  one 
our  studies  revealed  is  that  25%  r^ 
evant  documents  were  found  by  Boolean 
search,  while  75%  were  found  by  using 
other  methods  combined,”  says  Baron. 


as  falsify  and  falsifying  while  excluding  irrelevant  terms,  such  as 
falsetto,  that  a  standard  keyword  search  mi^t  include. 

Another  alternative  is  “concept  search”  techndogy  that  re¬ 
trieves  information  related  to  a  concept  rather  than  a  keyword  or 
phrase.  For  example,  a  concept  search  based  on  the  word  oil  would 
recognize  that  documents  about  petroleum  are  also  relevant. 

“Conceptual  technology  is  a  much  more  effective  tool  than 
keyword  searching,”  says  Oleh  Hrydco,  president  of  H&A  eDiscovery 

that  groups  together  documents  that  address  related  concepts. 
The  companf  says  the  tool  cuts  search  time  by  to  70%. 

Other  search  technologies  rely  on  taxonomies  of  industry 


Despite  the  increasii^  availability  ci  more  advanced  seardi  tech¬ 
nologic,  the  new  took  aren’t  being  snapped  up  by  old-school  law 
firms.  “In  terms  of  comfort,  the  more  senior  practitionefs  might 
[nne  for  the  good  old  days  when  they  had  bores  of  docunoents  {to 
search  throu^],”  says  Richard  Braman,  executive  director  of  The 
Sedona  Conference,  an  e-discoveiy  think  tank  in  Arizona. 

For  now,  the  outcomes  of  court  cases  all  too  often  hinge  on 
cM-fashioned  keyword  searches.  Warns  Cormack:  “We  have  vast 
needles  in  haystacks,  and  we’re  not  using  state-of-the-art  search 
techniques  to  find  them.”  ♦ 

Waxer  is  a  freelance  writer  in  Toronto.  You  can  contact  her  at 
cwaxer@symparico.ca. 
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Tightening  Up  SaaS  Security 


After  just  a  cnuple  of  weeks 
at  my  new  post.  Tm  already 
finding  plenty  of  things  to  do. 

First  up  is  following  up  on 
a  plan  to  implement  a  SIEM 
(sernirity  incident  and  event  manage¬ 
ment)  tool.  While  my  new  company 
was  looking  for  a  replacement  for  its 
security  manager,  it  hired  a  consultant 
to  fill  in.  This  interim  manager  initiated 
a  SIEM  proof  of  concept.  I’m  not  keen 
on  inheriting  this  selection,  the  problem 
being  that  a  SIEM  tool  is  only  as  good  as 
the  logs  that  are  fed  into 
it.  but  I  don't  want  to  risk 
losingan  opportunity 
to  enhance  the  secv 
posture  of  the  organiza¬ 
tion.  I  need  to  make  sure 
we  get  full  value  from  this  investment, 
which  will  probably  exceed  S300.000. 

I  will  also  be  contacting  references  and 
negotiating  the  price.  I'll  probably  have 
mote  to  tell  you  about  this  project  as  it 
progresses. 

Another  issue  vying  for  my  attention 
early  on  is  the  company's  heavy  use  of 
software  as  a  service  (SaaS).  At  my  last 
company,  we  used  four  SaaS  vendors. 
This  company  far  exceeds  that  number, 
because  it  tends  to  choose  a  SaaS  option 


ahead  of  either  building  applications 
in-hrxise  or  buying  them.  As  a  result, 
we  currently  use  more  than  30  SaaS 
offerings.  It’s  a  nightmare  from  a  security 
perspective,  for  many  reasons. 

For  example,  each  SaaS  relationship 
requires  connecting  some  aspect  of  our 
trusted  network  infrastructure  with  the 
vendor's  network.  In  doing  this,  security 
has  been  an  afterthought.  We're  using 
a  VPN,  but  that  only  addresses  encryp¬ 
tion.  The  associated  firewall  rules  are 
pathetically  weak,  and  in  soiw  cases  the 


are  using  can  be  accessed  freely  from 
the  public  Internet.  I  want  access  to 
be  restricted  to  the  company's  trusted 
network.  As  it  is,  employees  can  access 
many  of  our  SaaS  applications  from,  say, 
an  Internet  kiosk  in  Moscow.  People 
from  outside  of  the  security  realm  think 
I'm  being  paranoid  when  I  say  that  I 

survey  tools  and  corporate  travel  sites. 
But  it's  not  all  about  the  content  of  the 
sites.  With  SSO.  credentials  that  are 


compromised  while  accessing  some  in¬ 
nocuous  SaaS  site  can  put  a  good  deal  of 
out  infrastructure  and  data  at  risk.  And 
employees  often  do  things  that  make 
compromise  all  too  easy,  such  as  clicking 
"remember  my  username  and  password" 
on  a  public  computet  or  simply  neglect¬ 
ing  to  sign  off. 

Tools  of  Compromise 

But  even  if  employees  ate  well  trained 
about  security  risks  and  don't  do  those 
sorts  of  things,  there  are  still  keyloggers, 
sniffers,  screen-capture  tools,  cameras 
and  other  methods  of  capturing  domain 
credentials.  For  example,  we  currently, 
change  passwords  every  90  days.  That 
means  that  if  someone  were  to  capture 
an  employee's  enterprise  credentials, 
the  hacker  would  have  as  long  as  three 
months  to  figure  out  what  other  SaaS  ap¬ 
plications  he  could  access.  He  would  only 
need  to  do  a  quick  query  of  our  external 
DNS  to  discover  our  Outlook  Web  Access 
site,  which  currently  isn't  protected  with 
two-factor  authentication.  What’s  more, 
many  people  these  days  (including  me) 
use  e-mail  as  a  complete  data  reposi¬ 
tory,  leaving  all  of  that  data  —  and  their 
calendars,  contact  lists  and  personal 
notes  —  wide  open  to  hackers  who  have 
the  proper  credentials. 

Over  the  course  of  the  next  few  weeks. 

that  will  include  two-factor  authentica¬ 
tion  and  other  ways  of  safeguarding 
access  to  our  SaaS-based  applications. 

If  you  have  some  advice,  1  would  love  to 
hear  from  you.  • 

This  week 's  journal  is  written  ly  a  real 
security  manager.  “Mathias  Thurman,” 
whose  name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  him  at  malhias. 
thurman@yahoo.com. 


When  connecting  our  trusted  network  to  the  SaaS 
vendors’  networks,  security  has  been  an  afterthought 


the  SaaS  tools  thatwi 
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which  will  probably  exceed  $joo,ooo. 

I  wiU  also  be  contacting  references  and 
negotiating  the  price.  I’ll  probably  have 
more  to  tell  you  about  this  project  as  it 

Another  issue  vying  for  my  attention 
early  on  is  the  company’s  heavy  use  of 
software  as  a  service  (SaaS).  At  my  last 
company,  we  used  four  SaaS  vendors. 
This  company  far  exceeds  that  number, 
because  it  tends  to  choose  a  SaaS  option 


the  SaaS  tools  that  we 
are  using  can  be  accessed  freely  from 
the  public  Internet.  I  want  access  to 
be  restricted  to  the  company’s  trusted 
network.  As  it  is,  employees  can  access 
many  of  our  SaaS  applications  from,  say, 
an  Internet  kiosk  in  Moscow.  People 
from  outside  of  the  security  realm  think 
Tm  being  paranoid  when  1  say  that  I 
want  mote  restrictions  on  things  like 
survey  tools  and  corporate  travel  sites. 
But  it’s  not  all  about  the  content  of  the 
sites.  With  SSO,  credentials  that  ate 


U  When  connecting  our  trusted  netv^ 

vendors’ networts,  security  has  been  an  afterthought 


many  people  these  days  (including  me) 
use  e-mail  as  a  complete  data  reposi¬ 
tory,  leaving  all  of  that  data  —  and  their 
calendars,  contact  lists  and  personal 

notes  —  wide  open  to  hackers  who  have 

the  poper  credentials. 

Over  the  course  of  the  next  few  weeks, 
1  will  write  a  policy  on  remote  access 
that  will  itKhide  two-fector  authentica¬ 
tion  and  other  ways  of  safeguarding 
access  to  out  SaaS-based  applications. 

If  you  have  some  advice,  I  would  love  to 
hear  from  you.  * 

This  week’s  foumol  is  written  by  a  real 
security  marutger.  “Hathlas  Thurmaii,’' 

whose  riome  and  eniplc^  hove  been  diiguisai 

for  obvious  reasons.  Contact  him  at  mothios. 
thur7non@yohoacom. 
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OPINION 


Bring  Your  Game! 


Videogames 
are  effective 
in  sorting  out 
new  hires 
and  training 
employees  in 
new  skills. 


■art  Perkins  is 

managing  partner  at 
Louisville.  Ky.-based 
Leverage  Partners 
Inc.,  which  helps 
organizations  invest 
well  in  IT.  Contact 
him  at  BartPerkinsg 
LeveragePartners.com. 


PPLYING  FOR  A  JOB?  Polish  your  resume  and  grab  your  DS. 
i  Research  shows  that  video  games  offer  a  more  eflfective  method 
k  of  determining  which  candidates  to  hire  than  personality  tests.  Ac- 
i  cording  to  researchers  F.L.  Schmidt  and  J.E.  Hunter,  “work  samples” 

candidate  selection  games  must  contain  jobrclated 


and  general  mental  ability  tests  are  nearly  twice 
as  eCfective  as  other  assessments.  Cutting«lge 
organizations  combine  these  two  techniques  in 
gamelike  simulations  that  require  candidates  to 
demonstrate  necessary  skills  and  address  job- 
specific  ptoUems.  Candidates  with  the  highest 
gattre  scores  are  the  most  likely  to  be  successful. 

Games  can  also  enhance  training  programs.  Mc¬ 
Donald’s  Japan  partnered  with  Nintendo  to  develop 
eSmart,  a  DS-hased  training  game  that  teaches  new 
crew  members  how  to  clean  workstations,  cook 
ferod,  take  orders,  serve  customers  and  handle  other 
common  situations.  It  decreased  training  time  from 
45  hours  to  roughly  24  and  eliminated  the  need 
for  human  trainers  during  intijoductory  lessons.  In 
addition,  eSmart  allows  Wi-Fi-cormected  trainers  to 
rrmnitor  individual  progress  and  provide  immediate 
feedback.  ESmart  has  increased  training  program 
efficiency  while  significantly  reducing  costs.  And 
games  like  eSmart  can  be  modified  quickly  to 
refiect  new  skill  requirements  or  changes  in  work 
tasks  or  processes. 

Games  can  simulate  many  jobs  fer  trainit^  or 
recruiting  purposes.  Repetitive  jobs  such  as  call 
center  agent,  bank  teller  and  meter  reader  are 
easily  simulated,  as  are  many  hands-on  lines  of 
work  such  as  HVAC,  auto  and  appliatKe  repair. 
More  complex  games  simulali  the  “soft  skUls”  re¬ 
quited  of  ^t-line  supervisors  and  salespeople  ferr 
moderately  complex  goods  (mobile  phones,  cars, 
etc.).  These  games  model  how  to  build  rapport, 
clarify  technical  information  and  resolve  poten¬ 
tially  uncomfortable  situations  such  as  conflicts. 

Standardized  personality  tests  have  long  been 
accepted  HR  tools.  Games,  however,  must  comply 
with  government  hiring  regulations.  In  the  US., 


content  arxl  provide  a  consistent  experience  for  all 
applicants.  Games  that  present  differem  users  with 
different  challenges  based  on  choices  they  make  at 
certain  points  are  prohibited.  Training  games  fece 
fewer  restrictions:  Different  experietKes  are  OK.  as 
long  as  the  game  is  used  to  improve  job  perfor¬ 
mance  and  isn't  the  basis  for  a  promotion  or  a  raise. 

Not  for  Everyone 

There  are  hurdles,  however.  Marty  companies 
have  shied  away,  believing  games  to  be  frivolous 
timewasters  that  are  in^iptopriate  in  the  work¬ 
place.  And  HR  policies  often  specifically  prohibit 
playing  games  on  the  company’s  time  or  comput¬ 
ers.  Additionally,  people  over  40  typically  have 
limited  gaming  skills.  (My  daughter  humiliates 
me  at  Mario  Kart!)  Older  applicants  may  find 
games  intimidating  if  they  don’t  know  how  to  use 
a  Wii’s  A  and  B  buttons  or  an  Xbox’s  X  and  Y  con¬ 
ventions.  So  qualified  individuals  with  pertinent 
experience  may  be  overlooked. 

Well-designed  games  promote  employee  reten¬ 
tion  by  providing  candidates  with  accurate  pre¬ 
views  of  job  activities.  Improved  understanding 
sets  realistic  expectations  and  can  cut  short-term 
turnover  in  half.  Games  also  create  the  perception 
that  a  company  is  a  progressive,  desirable  and  fun 
place  to  work,  particularly  for  younger  people. 

Overall,  games  are  good  news  for  overworked 
and  understaffed  HR  organizations.  They’re  a 
highly  effective  way  to  identify  the  most  promis¬ 
ing  candidates  from  a  large  applicant  pool.  In  ad¬ 
dition,  training  games  prtrvicfe  liands-mi  practice 
for  real-world  situations  —  without  the  risk  of 
spilling  milk  or  dropping  french  fries.  ♦ 
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nw  WMHIHMIIS  the  economic  turmoil  of  the  past  three 

years.  IT  certificalian  pay  premiums  took  a  tumble  in  the  tWrd 

quarter,  accord**  to  Foote  Partners  UC  s  quarterly  analysis  of 

IT  skills  and  certificatiotts  pay.  tarid  Foote,  the  firm’s  CEO  and 
ctwl  research  officer,  enpressed  surprise  at  the  drop  in  com¬ 
pensation  for  security  certifications  in  particular,  noting  that  "security  certifka- 

tkjre  pay  has  been  on  a  steady  upward  climb  since  October  2006." 

Fooe  PBtners  noted  that  the  decrease  in  additional  pay  awarded  to  IT  work¬ 
ers  for  security  certificatiotB  does  not  tnean  that  dernand  for  such  workers 
has  deckned.  but  rather  that  the  supply-and-demadd  ratio  has  shifted.  It  could 
be  tha  Ihere  is  now  a  glut  of  certifications  in  the  market,  making  it  easier  for 
einpkjyets  to  fM  positions  without  increasing  pay  levels. 


...BUTSMUSPAYWASUP 

These  noncertified  IT  skWs  categories  posted  increases  in  overall  pay 


**henthe*cononiytanlr*d,lleltmyiobasdlr*ctorofapro|- 
recently  finhlied  tlw  pibgrani.  Any  advice  on  how  h^WUM 
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MARKETPLACE 


I  rii 


Desktop  with  Spider 

Network  with  spider 

publish  (for  portable 

web  with  spider 

Engine  for  Linux 


Engine 


for  Win 


&  .NET 


nstantly  Search  Terabytes  .of  Text 


♦  25-f  full-text  and  fielded  data  search  options 

♦  Built-in  file  parsers  and  converters  highlight  hits  in  popular  file  types 
«  Spider  supports  static  and  dynamic  web  data;  highlights  hits  with 
links,  formatting  and  images  intact 

♦  API  supports  C++,  .NET,  Java,  SQL  etc  .NET  Spider  API. 

Includes  64-bit  (Win/Linux) 

+  Fully-functionai  evaluations  avaiiabie 

^—Content  extraction  only  licenses  also  available 


dtSearch  ‘covers  all  data  sources  ...  powerful  Web-based  engines" 
—  eWEEK 

"Lightning  fast ...  performance  was  unmatched  by  any  other  product" 
—  Redmond  Magazine 

For  hundreds  more  reviews,  and  hundreds  of  deveioper 
case  studies,  see  www.dtSearch.com 

1-800-IT-FINDS  •  www.dtSearch.com 

■/Je'Sinarf  CAio/ce  for  Text  Retrieval*  since’1 991 ' 


pick  the  topics, 
pick  the  sources, 
pick  the  frequency. 


It's  free. 
V. techdispenser.com 


RelayGoose  II 

Climate  Monitor 
Relay  Control 

$599 


Temperature 

■  6  Analog  Inputs 

■  4  Digital  Sensor  Ports 

Alerts  with  Escalations 


Wea 


IT  Dogs  I 


43 


IT|careers 


ITlcareers 
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China  is  very 
good  at  building 
b'$  things, and 
supercomputeis 
are  becoming 
very,  very  big 
things. 


miBODEAlL 


How  China  Will  Eat 
The  U.s;s  Tech  Lunch 


You  CAM  SAY  WHAT  YOU  WANT  about  the  inefficiencies  and  lack  of 
innovation  in  China’s  mix  of  capitalism  and  state  planning,  but  the 
facts  tell  their  own  story.  China  now  has  the  world’s  fastest  super¬ 
computer,  a  2.5-petaflop  system,  and  is  completely  focused  on 

buiUing  an  eiascale  system  (roughly  1,000  Omes  this  may  be  leading  companies 


isaComputenmrId 
reporter.  You 
can  contact  him 
at  pthibodeau9 
computerworld.com. 


xe  povrerful  than  a  petaflop  system),  possibly  as 

nrly  as  2016. 

Despite  this,  C3iina  is  faulted  for  lacking  the 


with  SUicon  Valley.  Perhaps  that’s  true  —  for  nc  . 

ButCThinaisverygoodatbuildingbigthings  — 
think  the  Great  Walt  for  starters  —  and  supercom¬ 
puters  are  becoming  very,  very  1^  things,  soon  to 
cost  $t  billion  or  so  each  for  an  erascale  system. 

So  what  if  the  U.S.  ends  up  dominatirrg  the 
tablet  cortrputirrg  rrrarket?  From  (Zhirra’s  perspec¬ 
tive,  it’s  more  important  to  build  systems  capable 
of  prodttcing  tnrly  revohttiottary  breakthroughs 

that  may  lead  to  new  irrdustries  and  techrrdogies. 

(3titta’s  ascertskm  in  the  supercomputer  rattks 
does  not  mean  that  the  U.S.  has  lost  its  mega- 

advantage  in  the  held.  But  there  ate  three  trends 

puttir^  the  U.S.  on  a  second-best  (or  worse)  path. 

The  first  trouMing  trend  is  the  lack  of  U.S. 
investmetrt  in  clean  energy.  In  June,  the  Pew 
Research  Center  reported  that  relative  to  the  size 

of  the  courrtry’s  econoirry,  U.S.  clean  energy  irrvest- 

ments  vwrre  lagging  behind  those  of  Europe,  China 
and  even  BraziL  Pew  wrote  that  “the  United  States 
is  on  the  verge  of  losing  its  leadership  position  in 
instaUed  renewable  energy  capacity,  with  Chitra 
surging  in  the  last  several  years  to  a  virtual  tie.” 

Chinaisbuildingschoob:weatetaisingtu- 
itiotrs  in  response  to  budget  cuts.  China  is  irrvest- 

ing  in  sirpescomputers,  in  part  to  propel  its  clean 

errergy  work;  we  are  spening  money  on  wars. 

Thesecoodtrendconcerrtstheattackonirt- 
novation. ’The  tech  industry  is  consolidating,  arrd 


tainirrg  thdr  market  positions  arrd  finding  new 

ways  to  lock  in  customers.  Vendors  ate  buying  in- 

novatron  by  acqrririrrg  start-rrps  instead  of,  in  some 

cases,  spendirtg  motrey  on  their  own  R&D  —  arrd 

those  acqirisitiorrs  also  reduce  competitive  threats. 

The  third  ptoUematic  trend  concerns  our  next 

Congress.  The  need  for  government  support  of 

time  when  this  country  is  taking  a  harshly  conserva¬ 
tive  turn.  There  is  a  belief  that  the  private  sector, 
unconstrained  by  regulations,  will  meet  the  national 
economic  needs.  What  that  will  get  us  is  mote  in¬ 
vestment  in  drilling  for  natural  gas,  not  green  tech- 
Supercomputers  are  built  by  national  gov¬ 
ernments,  not  private  industry,  and  without 
national  leadership,  they  will  not  be  buik.  They 
cost  too  much.  The  U.S.  is  spending  mote  than 
$300  millioo  alone  on  Blue  Waters,  a  lo^retaflop 
systemthat’sduenextyear.TheU.S.hasanexa- 

bfllions  it  is  likely  to  need.  China  has  a  plan,  and  k’s 

The  most  important  takeaway  from  this 
month’s  ranking  of  supercomputers  in  the  latest 
Topsoo  list  isn’t  that  China  b^  the  No.  i  system, 

but  that  the  U.S.  has  only  five  of  the  top  10  spots. 
’That’s  new. ’The  U.S.  usually  has  seven  in  the 
top  to.  Now,  two  of  the  to  leading  systems  are 
in  China;  Japan,  France  and  Germany  have  one 
each.  What  this  list  says  is  that  the  global  race 
to  build  the  world’s  most  powerful  systems  is 
accelerating,  and  the  U.S.  doesn’t  haw  a  lock  on 


DON’T  LET  THE  DOOR  HIT  YOUR  OLD 
WORK  PHONES  ON  THE  WAY  OUT. 


A 


